https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:38:27.174703+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05456 bdu:2023-05456 2026-10-06T10:38:27.374650+00:00 bdu:2023-05456 https://cve.radiocsirt.org/vuln/cleanstart-2024-wp19421 CLEANSTART-2024-WP19421 — Cacti is an open source operational monitoring and fault management framework 2026-10-06T10:38:27.374788+00:00

Affected: CleanStart: cacti

Security vulnerability affects the cacti package. Cacti is an open source operational monitoring and fault management framework.

 https://cve.radiocsirt.org/vuln/euvd-2026-216701 EUVD-2026-216701 2026-10-06T10:38:27.374935+00:00 EUVD-2026-216701 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39360 fkie_cve-2023-39360 2026-10-06T10:38:27.374961+00:00

Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data. The vulnerability is found in `graphs_new.php`. Several validations are performed, but the `returnto` parameter is directly passed to `form_save_button`. In order to bypass this validation, returnto must contain `host.php`. This vulnerability has been addressed in version 1.2.25. Users are advised to upgrade. Users unable to update should manually filter HTML output.

 https://cve.radiocsirt.org/vuln/gsd-2023-39360 gsd-2023-39360 2026-10-06T10:38:27.375025+00:00 gsd-2023-39360 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0275-1 openSUSE-SU-2023:0275-1 — Security update for cacti, cacti-spine 2026-10-06T10:38:27.375049+00:00

Security update for cacti, cacti-spine

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39360 UBUNTU-CVE-2023-39360 2026-10-06T10:38:27.375114+00:00

Affected: Ubuntu:Pro:14.04:LTS: cacti, Ubuntu:Pro:16.04:LTS: cacti, Ubuntu:Pro:18.04:LTS: cacti, Ubuntu:Pro:20.04:LTS: cacti, Ubuntu:Pro:22.04:LTS: cacti, Ubuntu:24.04:LTS: cacti

Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data. The vulnerability is found in `graphs_new.php`. Several validations are performed, but the `returnto` parameter is directly passed to `form_save_button`. In order to bypass this validation, returnto must contain `host.php`. This vulnerability has been addressed in version 1.2.25. Users are advised to upgrade. Users unable to update should manually filter HTML output.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2275 WID-SEC-W-2023-2275 — Cacti: Mehrere Schwachstellen 2026-10-06T10:38:27.375175+00:00

Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder einen Cross-Site-Scripting-Angriff durchzuführen.